Use the GCP testIamPermissions functionality to bruteforce and discover your permissions - View it on GitHub